Threat actors
220 actors tracked across public CTI reporting. Search by name or alias; sort by activity. Shown on a 7-day delay.
sort
Qilin(Agenda, Pestilent Mantis, Qilin)
378 reports▲58%Thegentlemen(ArmCorp, Hastalamuerte, Phantom Mantis)
372 reports▲62%Dragonforce(Hackledorb)
147 reports▼28%INC Ransom(INC Ransom, INC Ransom Group, INC ransomware)
122 reports▲47%Akira(Akira v2)
121 reports▲12%Clop(CL0P, CLOP, CLOPcrawford)
107 reports▲4600%Deadlock
100 reports▼65%ShinyHunters(GRUB1, Icarus, ShinyHunters)
96 reports▲5%LockBit(ALPHV, LockBit, LockBit 3.0)
91 reports▼77%Safepay
78 reports▲50%Krybit
75 reports▲36%Nova
74 reports±0%Play
59 reports▲62%Nightspire
58 reports▲60%TeamPCP(@pcpcats, CipherForce, DeadCatx3)
50 reports▼43%Genesis
44 reports▲8%Cmdorganization
39 reports▼61%Settra
37 reports▼52%Crpxo
37 reports▲417%Orova
36 reportsNEWGlobal secret group
35 reportsNEWEverest(Everest ransomware gang)
35 reportsNEWChaos
35 reports▲25%Anubis(Sphinx)
34 reports±0%Payload
34 reports▼57%Scattered Spider(0ktapus, 0sect, ALPHV)
31 reports▼54%Stormous
29 reports▼100%Spacebears
28 reports▼11%Worldleaks(Hunters International, Hunters International spin-off)
27 reports▼56%Coinbasecartel
26 reports▲450%L group
26 reportsNEWPear(Pure Extraction and Ransom)
25 reports▼77%APT28(APT28, Fancy Bear, FancyBear)
24 reports▼50%Exfilsquad
23 reportsNEWM3rx
22 reports▲167%Gunra(Golden Community)
21 reports▲175%Aurora
21 reports▼36%Apt73(Wolves of Turan)
21 reports▼91%Silent Ransom Group(Chatty Spider, Luna Moth, SRG)
20 reports▲250%Section9
20 reportsNEWStorm
19 reportsNEWDark project
19 reportsNEWMuddyWater(Boggy Serpens, Mango Sandstorm, MuddyWater)
19 reports▼33%Ransomhouse
18 reports▲150%Icarus(mr bean)
18 reports▼100%Interlock(GOLD EMBRACE, Hive0163, KongTuke)
17 reports▲80%Ailock
17 reports▼75%Direwolf
17 reportsNEWVoid Blizzard(CL-STA-1114, Laundry Bear, TA488)
17 reportsNEWThreeam
16 reports±0%Blacknevas(CryptoRex)
15 reports▲100%Contagious Interview(Fake Font, Famous Chollima, HexagonalRodent)
15 reports▲100%Salt Typhoon(Earth Estries, Salt Typhoon, UAT-9244)
15 reportsNEWTurla(ATG26, Blue Python, Iron Hunter)
15 reports▼88%Titan
15 reports▼80%Lazarus Group(APT38, Andariel, Bureau 121)
14 reports▲600%Sandworm(APT34, APT44, HEXANE)
14 reports▲200%Bravox
14 reports▲67%Orion
14 reportsNEWBraincipher
14 reports▼89%Shadowbyt3$
14 reports▼50%BlueNoroff(Alluring Pisces, BlueNoroff, COPERNICIUM)
13 reports▲500%Kairos
12 reports▲500%Majinahanashi
12 reportsNEWBooba
12 reports▼29%Medusalocker
12 reports▼100%Rhysida
11 reports▲50%Lazarus(APT38, HIDDEN COBRA, Lazarus Group)
11 reports▲400%JADEPUFFER
11 reports▲20%Mustang Panda(Bronze President, HIVE0154, Mustang Panda)
11 reports▼50%APT29(APT29, Cozy Bear, Midnight Blizzard)
11 reports▲100%EvilTokens(ARToken)
11 reports▼83%BlackCat(ALPHV, AlphV, BlackCat)
11 reports▼100%NoName057(16)(NoName)
11 reports▼100%Payoutsking
10 reports▼50%Nimbus Manticore(GalaxyGato, Iranian Dream Job, Mirage Kitten)
10 reports▲100%Handala Hack Team(Banished Kitten, Cobalt Mystique, HPRF)
10 reports±0%Ghostwriter(FrostyNeighbor, Ghostwriter, PUSHCHA)
10 reports▼100%Arcusmedia
9 reports▼71%Gamaredon(ACTINIUM, Aqua Blizzard, BlueAlpha)
9 reports▼100%Auditteam
9 reports▼100%RansomHub
9 reports▼100%UAT-8616
9 reports▼100%Lamashtu
9 reports▼100%Medusa(Medusa)
8 reportsNEWKimsuky(APT43, Black Banshee, Cerium)
8 reports▲200%Fox Tempest
8 reportsNEWHelix(UNC6661, UNC6671)
8 reports▲200%Lynx
8 reports▼60%Insomnia
8 reports▲400%Black x
8 reportsNEWCyberAv3ngers(Bauxite, CL-STA-1128, Hydro Kitten)
8 reports▲100%Termite
8 reportsNEWDoommageddon
8 reports▼67%Volt Typhoon
8 reports▼50%REvil(Sodinokibi)
8 reportsNEWNightmare Eclipse(Chaotic Eclipse)
8 reports·Panzer
7 reportsNEWWallstreet
7 reports▼60%UAT-7810
7 reports▼60%showing 100 of 220